Compositional Security Modelling Structure, Economics, and Behaviour

Caulfield, T.; Pym, D.; Williams, J.

Abstract

Security managers face the challenge of formulating and implementing policies that deliver their desired system security postures — for example, their preferred balance of confidentiality, integrity, and availability — within budget (monetary and otherwise). In this paper, we describe a security modelling methodology, grounded in rigorous mathematical systems modelling and economics, that captures the managers’ policies and the behavioural choices of agents operating within the system. Models are executable, so allowing systematic experimental exploration of the system-policy co-design space, and compositional, so managing the complexity of large-scale systems.

Citation

Caulfield, T., Pym, D., & Williams, J. (2014). Compositional Security Modelling Structure, Economics, and Behaviour. In Human aspects of information security, privacy, and trust : 2nd International Conference, HAS 2014, Held as part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014 : proceedings (233-245). Springer Verlag. https://doi.org/10.1007/978-3-319-07620-1_21

• Publication Date: Jun 27, 2014
• Deposit Date: Jun 30, 2015
• Publicly Available Date: Jul 7, 2015
• Publisher: Springer Verlag
• Pages: 233-245
• Series Title: Lecture notes in computer science
• Series Number: 8533
• Book Title: Human aspects of information security, privacy, and trust : 2nd International Conference, HAS 2014, Held as part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014 : proceedings
• ISBN: 9783319076195
• DOI: https://doi.org/10.1007/978-3-319-07620-1_21
• Public URL: https://durham-repository.worktribe.com/output/1675288
• Additional Information: Volume title: Human Aspects of Information Security, Privacy, and Trust: Second International Conference, HAS 2014, Held as Part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014. Proceedings. Edited by: Theo Tryfonas and Ioannis Askoxylakis.